#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
skoveit/cve-2026-34200Proof-of-concept demonstrating unauthenticated cross-origin takeover of Nhost MCP Server, enabling database exfiltration, table drops, and permission…
skoveit/cve-2026-29781Proof-of-concept exploit for CVE-2026-29781, weaponizing captured Sliver implant credentials to trigger a nil-pointer panic and crash the C2 server…
simondankelmann/cve-2026-3854-testTests bypasses for CVE-2026-3854 patch, providing a proof-of-concept to validate security fixes.
shubham0d/cve-2021-30853Proof-of-concept script that demonstrates bypassing macOS Gatekeeper, notarization, and XProtect checks by exploiting CVE-2021-30853, allowing…
shreyas-malhotra/cve-2026-33439-openamVulnerable endpoint description for CVE-2026-33439 in OpenAM
shinycolumn/cve-2025-56802AES-CFB Key Generation and Management Vulnerability in Reolink Desktop Application
shinycolumn/cve-2025-56801AES-CFB IV Generation Vulnerability in Reolink Desktop Application
shinycolumn/cve-2025-56799OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application
shinigami-777/poc_cve-2025-2568Proof-of-concept exploit for CVE-2025-2568, demonstrating unauthorized access and modification of WordPress Vayu Blocks plugin options via missing…
shinycolumn/cve-2025-56800Local Authentication Bypass Vulnerability in Reolink Desktop Application
shibaaa204/pack2therootProof-of-concept exploit for CVE-2026-41651, a Linux local privilege escalation vulnerability in Pack2 software, demonstrating root access and system…
shinigami-777/poc_cve-2025-11579Proof-of-concept exploit for CVE-2025-11579, a denial-of-service vulnerability in rardecode that triggers an out-of-memory crash via a crafted RAR…
shi10587s/sauercloude0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119
shazed-x/cve-2025-32463- Vulnerable: sudo 1.9.14, 1.9.15, 1.9.16, 1.9.17 - Patched in: sudo 1.9.17p1 and later - Legacy versions older than 1.9.14 are not affected, as they…
sharma19d/cve-2026-35678Detailed vulnerability research report on an IDOR in Eduplus Student ERP, including technical analysis, PoC, impact assessment, and remediation…
shalevo13/se7enslipA scanner and testter of the CVE-2025-11001 of 7-zip
sharathc213/cve-2023-7173Proof-of-concept for CVE-2023-7173, a stored XSS in Hospital Management System 1.0, with Docker setup and reproduction steps.
sharathc213/cve-2023-7172Intentionally vulnerable Hospital Management System demonstrating SQL injection (CVE-2023-7172) with Docker setup and PoC for educational security…
